IN THE CLAIMS : 

Please CANCEL claim 20 without prejudice or disclaimer and AMEND claims 1 5 
7, 21, 27, 29-31, 42, 46, 50 and 51 as follows. 

1. (Currently Amended) A method, comprising: 
using a specific record associated with a user, wherein 
the specific record is stored at a server node, 

the specific record contains information that determines that a user characteristic is 
to be verified with a home network prior to providing access to said service, and 

authorization and authentication for the user is verified e v e ry Mth s e ssion, wh e r e in 
M is an integ e r repr e s e nting th e curr e nt s e s s ion when the number of simultaneous sessions 
is equal to a predetermined number . 

2. (Previously Presented) The method as claimed in claim 1, further 
comprising: 

transferring said information from an authentication, authorization and accounting 
home server to the server node in a signaling path for a service setup, a service event or a 
registration, or a combination thereof. 



3. (Previously Presented) The method as claimed in claim 1, further 
comprising: 
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deciding, based on said information, that the authentication or authorization, or 
both, needs be verified. 

4. (Previously Presented) The method as claimed in claim 1, further 
comprising: 

performing the authentication or authorization, or both. 

5. (Previously Presented) The method as claimed in claim 4, further 
comprising: 

performing the authentication or authorization, or both, by using an authentication, 
authorization and accounting home server. 

6. (Previously Presented) The method as claimed in claim 4, further 
comprising: 

performing the authentication or authorization, or both, in the server node when 
the required parameters are available. 

7. (Currently Amended) A method, comprising: 

using a user specific record associated with a user, wherein the user specific record 
is stored in a server node that indicates a condition that, when satisfied, determines that a 
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user characteristic is to be verified with a home network prior to providing access to a 
service; and 

providing access to said service responsive to said user specific record, wherein 
the condition is that authorization and authentication is verified every Mth s e ssion, 

wh e r e in M is an int e ger r e pr e s e nting th e curr e nt s es sion when the number of simultaneous 

sessions is equal to a predetermined number . 

8. (Previously Presented) The method as claimed in claim 7, further 
comprising: 

determining whether said condition is satisfied; and 

providing access to said service without verifying said user characteristic when 
said condition is not satisfied. 

9. (Previously Presented) The method as claimed in claim 7, further 
comprising: 

determining whether said condition is satisfied; 

verifying said user characteristic when said condition is satisfied; and 

subsequent to said verifying of the user characteristic, providing access to said 

service when said user characteristic indicates that the user is permitted to access said 

service. 
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10. (Previously Presented) The method as claimed in claim 7, further 
comprising: 

determining whether said condition is satisfied when a call session between said 
user and a service provider node is initiated. 

1 1 . (Previously Presented) The method as claimed in claim 7, further 
comprising: 

determining from the user specific record associated with said user when said 
condition exists during a call session between a user terminal and a service provider 
node. 

12. (Previously Presented) The method as claimed in claim 7, further 
comprising: 

indicating, via said user specific record, when access to said service is permitted 
without determining, from data stored at a server node in said home network, whether 
access is permitted. 

13. (Previously Presented) The method as claimed in claim 7, further 
comprising: 

storing said user specific record at a server node of said serving network. 
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14. (Previously Presented) The method as claimed in claim 7, further 
comprising: 

generating a register message at a user terminal and transmitting said register 
message to a local server node; 

determining whether a condition indicated by said user specific record stored at 
said local server node is satisfied; 

generating an access message at said local server node indicating that access to 
said service is permitted; and 

transmitting said access message to a service provider node. 

15. (Previously Presented) The method as claimed in claim 14, further 
comprising: 

prior to said storing of said user specific record, generating a request message at 
said local server node and transmitting said request message to a home authentication, 
authorization and accounting server of the user; and 

transferring data comprising said user specific record from said home 
authentication, authorization and accounting server to said local server node responsive to 
said request message. 

16. (Previously Presented) The method as claimed in claim 7, further 
comprising: 
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generating an invite message at a user terminal and transmitting said invite 
message to a local server node; 

determining whether a condition indicated by said user specific record stored at 
said local server node is satisfied; 

generating an access message at said local server node indicating that access to 
said service is permitted; and 

transmitting said access message to a service provider node. 

17. (Previously Presented) The method as claimed in claim 7, wherein said 
user characteristic comprises whether said user is authorized to access said service. 

18. (Previously Presented) The method as claimed in claim 7, wherein said 
user characteristic comprises whether said user is authenticated to access said service. 

19. (Previously Presented) The method as claimed in claim 7, wherein said 
condition determines the frequency at which said user is to be authorized or 
authenticated, or both, during a call session between said user terminal and a service 
provider node. 

20. (Cancelled) 
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21. (Currently Amended) An apparatus, comprising: 

receiving means for receiving a message from a user terminal; 

storing means for storing a user specific record associated with a user indicating a 
condition that, when satisfied, determines that a user characteristic is to be verified with a 
home network prior to providing the user with access to a service; and 

generating means for generating, in response to said user specific record, an access 
message to provide said user with access to said service from a service provider node, 
wherein 

the condition is that authorization and authentication is verified e v e ry Mth s e ssion, 
whoroin M is an integer representing the current sossion w hen the number of simultaneous 
sessions is equal to a predetermined number . 

22-26. (Cancelled) 

27. (Currently Amended) An apparatus, comprising: 
record using means for using a user specific record associated with a user 
indicating a condition that, when satisfied, determines that a user characteristic is to be 
verified with a home network prior to providing said user with access to a service, 
wherein the user specific record is stored in a server node; and 
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generating means for generating, in response to said user specific record, an access 
message for providing said user with access to said service from a service provider node, 
wherein 

the condition is that authorization and authentication is verified e v e ry Mth s e ssion, 
wh e r e in M is an int e g e r r e pr e senting th e current s e ssion when the number of simultaneous 
sessions is equal to a predetermined number . 

28. (Cancelled) 

29. (Currently Amended) A method, comprising: 

storing an authorization and authentication profile, associated with a user, wherein 
the authorization and authentication profile is stored at a serving node in a serving 
network; and 

using said authorization and authentication profile at said serving node, wherein 
said authorization and authentication profile contains information indicating a condition 
that, when satisfied, determines that a user characteristic is to be verified with a home 
network prior to providing access to said service, wherein 

the condition is that authorization and authentication is verified ev e ry Mth session, 
wher e in M is an integ e r repr e s e nting th e current s e ssion when the number of simultaneous 
sessions is equal to a predetermined number . 
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30. (Currently Amended) An apparatus, comprising: 

an interface configured to receive a message from a user terminal; and 

a processor configured to 

use a user specific record associated with said user to indicate a condition 
that, when satisfied, determines that a user characteristic is to be verified with a home 
network prior to providing said user with access to a service, wherein the user specific 
record is stored in a server node, and 

generate, in response to said user specific record, an access message to 
provide said user with access to said service from a service provider node, wherein 

the condition is that authorization and authentication is verified e very Mth s e ssion, 
wh e rein M is an integer representing the current scssion when the number of simultaneous 
sessions is equal to a predetermined number . 

3 1 . (Currently Amended) An apparatus, comprising: 
a processor configured to 

use a user specific record associated with a user to indicate a condition that, 
when satisfied, determines that a user characteristic is to be verified with a home network 
prior to providing said user with access to a service, wherein the user specific record is 
stored in a server node, and 

generate, in response to said user specific record, an access message to 
provide said user with access to said service from a service provider node, wherein 
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the condition is that authorization and authentication is verified e very Mth s e ssion, 
wh e r e in M is an integ e r repr e senting the current s e ssion w hen the number of simultaneous 
sessions is equal to a predetermined number . 

32. (Previously Presented) The apparatus as claimed in claim 30, further 
comprising: 

a transmitter configured to transmit said access message to the service provider 

node. 

33. (Previously Presented) The apparatus as claimed in claim 30, further 
comprising: 

a receiver configured to receive data comprising said user specific record 
transmitted from a home authentication, authorization and accounting server node. 

34. (Previously Presented) The apparatus as claimed in claim 30, the apparatus 
comprising a serving or proxy-call session control function node. 

35. (Previously Presented) The apparatus as claimed in claim 30, wherein said 
user specific record comprises a first data field identifying said user and a second data 
field determining when authentication or authorization, or both, of said user is required in 
order to access said service. 
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36. (Previously Presented) The apparatus as claimed in claim 30, wherein said 
server node further comprises storage configured to store a user specific record. 

37. (Previously Presented) The apparatus as claimed in claim 31, wherein said 
controller further comprises storage configured to store a user specific record. 

38. (Previously Presented) The apparatus as claimed in claim 31, further 
comprising: 

a transmitter configured to transmit said access message to the service provider 

node. 

39. (Previously Presented) The apparatus as claimed in claim 31, further 
comprising: 

a receiver configured to receive data comprising said user specific record 
transmitted from a home authentication, authorization and accounting server node. 

40. (Previously Presented) The apparatus as claimed in claim 3 1, the apparatus 
comprising a serving or proxy-call session control function node. 

41. (Previously Presented) The apparatus as claimed in claim 31, wherein said 
user specific record comprises a first data field identifying said user and a second data 
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field determining when authentication or authorization, or both, of said user is required in 
order to access said service. 

42. (Currently Amended) A method, comprising: 
receiving a message from a user terminal; 

using a user specific record associated with said user indicating a condition that, 
when satisfied, determines that a user characteristic is to be verified with a home network 
prior to providing said user with access to a service, wherein the user specific record is 
stored in a server node; and 

generating, in response to said user specific record, an access message providing 
said user with access to said service from a service provider node, wherein 

the condition is that authorization and authentication is verified e very Mth s e ssion, 
wh e r e in M is an integer repr e s e nting th e current s e ssion when the number of simultaneous 
sessions is equal to a predetermined number . 

43. (Previously Presented) The method as claimed in claim 42, fiirther 
comprising: 

transmitting said access message to the service provider node. 

44. (Previously Presented) The method as claimed in claim 42, further 
comprising: 
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receiving data comprising said user specific record transmitted from a home 
authentication, authorization and accounting server node. 

45. (Previously Presented) The method as claimed in claim 42, wherein said 
user specific record comprises a first data field identifying said user and a second data 
field determining when authentication or authorization, or both, of said user is required in 
order to access said service. 

46. (Currently Amended) A method, comprising: 

using a user specific record associated with a user indicating a condition that, 
when satisfied, determines that a user characteristic is to be verified with a home network 
prior to providing said user with access to a service, wherein the user specific record is 
stored in a server node; and 

generating, in response to said user specific record, an access message providing 
said user with access to said service from a service provider node, wherein 

the condition is that authorization and authentication is verified e v e ry Mth s e ssion, 
wher e in M is an integ e r r e pr e senting th e current session when the number of simultaneous 
sessions is equal to a predetermined number . 

47. (Previously Presented) The method as claimed in claim 46, further 
comprising: 
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transmitting said access message to the service provider node. 

48. (Previously Presented) The method as claimed in claim 46, further 
comprising: 

receiving data comprising said user specific record transmitted from a home 
authentication, authorization and accounting server node. 

49. (Previously Presented) The method as claimed in claim 46, wherein said 
user specific record comprises a first data field identifying said user and a second data 
field determining when authentication or authorization, or both, of said user is required in 
order to access said service. 

50. (Currently Amended) A computer program embodied on a computer- 
readable storage medium, the program configured to controlling a processor to perform a 
process, the process comprising: 

receiving a message from a user terminal; 

using a user specific record associated with a user indicating a condition that, 
when satisfied, determines that a user characteristic is to be verified with a home network 
prior to providing said user with access to a service, wherein the user specific record is 
stored in a server node; and 
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generating, in response to said user specific record, an access message providing 
said user with access to said service from a service provider node, wherein 

the condition is that authorization and authentication is verified e v e ry Mth s e ssion, 
wh e rein M is an int e g e r r e pr e senting the curr e nt s e ssion when the number of simultaneous 
sessions is equal to a predetermined number . 

5 1 . (Currently Amended) A computer program embodied on a computer- 
readable storage medium, the program configured to controlling a processor to perform a 
process, the process comprising: 

using a user specific record associated with a user indicating a condition that, 
when satisfied, determines that a user characteristic is to be verified with a home network 
prior to providing said user with access to a service, wherein the user specific record is 
stored in a server node; and 

generating, in response to said user specific record, an access message providing 
said user with access to said service from a service provider node, wherein 

the condition is that authorization and authentication is verified ev e ry Mth s e ssion, 
wherein M is an integer representing the current session w hen the number of simultaneous 
sessions is equal to a predetermined number . 
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